Cyber and physical security
Cyber Essentials
Getting you ready for Cyber Essentials and Cyber Essentials Plus, fixing what would fail, and helping you through the assessment.
The five controls
Firewalls
Every internet connection and device protected by a correctly configured firewall, with default passwords changed.
Secure configuration
Unneeded software and accounts removed, and devices locked when not in use.
User access control
People get only the access they need, admin accounts are separate, and multi-factor sign-in protects cloud services.
Malware protection
Antivirus or application control on every device in scope.
Security update management
Supported software only, with high-risk and critical updates installed within 14 days.
How we get you certified
Agree the scope
Which devices, networks and cloud services are covered. Getting this right avoids surprises later.
Find the gaps
We check every device and service against the requirements and list what would fail.
Fix them
Updates, settings, unsupported devices and missing multi-factor sign-in, fixed and recorded.
Assessment
You complete the questionnaire with our help, and an IASME certification body reviews it. For Cyber Essentials Plus, an assessor also tests your devices.
Technologies
Questions
What's the difference between Cyber Essentials and Plus?
Cyber Essentials is a self-assessment checked by a certification body. Cyber Essentials Plus adds hands-on testing of your devices by an assessor. Both cover the same five controls.
Do you issue the certificate?
No. Certificates are issued by IASME's certification bodies. We get you ready and support you through their assessment.
How long does certification last?
Twelve months. We help keep you compliant between renewals, which makes the next one straightforward.
More cyber and physical security
Tell us what you need.
Email us about your IT: what you have now, what isn't working, and what you'd like to change.